n8n-workflow-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation and code snippets as patterns for executing system-level commands, such as using
pg_dumpfor automated database backups via the Node.jschild_processmodule. - [INDIRECT_PROMPT_INJECTION]: The skill describes architectural patterns for AI agents that ingest untrusted data from webhooks and use tools to interact with databases and APIs.
- Ingestion points: Untrusted data enters the agent context through webhook triggers and tool outputs as described in
webhook_processing.mdandai_agent_workflow.md. - Boundary markers: The skill recommends using structured system prompts to define roles and output formats to limit agent behavior.
- Capability inventory: The patterns include potential tool access to full database operations, HTTP requests, and custom JavaScript/Python code execution.
- Sanitization: The skill explicitly recommends mitigations including the use of read-only database accounts for AI tools, manual validation nodes, and input sanitization scripts.
- [SAFE]: The instructions serve as a security-conscious guide that promotes industry best practices, such as using parameterized queries to prevent SQL injection, utilizing dedicated credential management instead of hardcoding secrets, and implementing the principle of least privilege for database service accounts.
Audit Metadata